replace with fork encrypted vals